Cisco 5520 - ASA IPS Edition Bundle User Manual

5-6
Cisco Secure Desktop Configuration Guide
OL-8607-02
Chapter 5 Setting Up CSD for Microsoft Windows Clients
Defining Location Criteria
CSD assigns the location to the client only if it has a certificate that contains both of the following, and
only if it matches at least one criterion in each of the completed areas in the Identification for
<Location> pane:
• Value in the Subject field that matches the value you specified in the “Issued By” field
• Value in the Issuer field that matches the value you specified in the “Issued To” field
Using a Signed File to Specify Certificate Criteria
To specify certificate criteria if you have a signed file (that is, the file is not a certificate file, but contains
a certificate):
Step 1 Right click the file and choose Properties.
The Properties window opens.
Step 2 Click the Digital Signatures tab (which appears only if the file is signed).
Step 3 Click Details.
Step 4 Click View Certificate.
The Certificate window opens.
Step 5 Click the Details tab.
Step 6 Complete both of the fields in the “Certificate Criteria” area of the Identification for <Location> pane
(Figure 5-2), as follows:
– Issued By—Click Subject in the Field column under the Details tab of the Certificate window.
The area below the Field column displays the subordinate fields and values assigned to the
Subject field of the certificate. The subordinate fields include such names as “CN” for common
name, “O” for organization unit name, and “E” for e-mail address. Type the value of one of these
subfields in the Issued By field on the Identification for <Location> pane to match it against
the Subject field of the certificate.
Note Specify the value of the subfield. For example, type the value of the “O” field, not the “O” itself.
– Issued To—Click Issuer in the Field column under the Details tab of the Certificate window.
The area below the Field column displays the subordinate fields and values assigned to the
Issuer field of the certificate. The subordinate fields include such names as “CN” for common
name, “O” for organization unit name, and “E” for e-mail address. Type the value of one of these
subordinate fields in the Issued To field on the Identification for <Location> pane to match it
against the Issuer field of the certificate.
CSD assigns the location to the client only if it has a certificate that contains both of the following, and
only if it matches at least one criterion in each of the completed areas in the Identification for
<Location> pane:
• Value in the Subject field that matches the value you specified in the “Issued By” field
• Value in the Issuer field that matches the value you specified in the “Issued To” field

Cisco 5520 - ASA IPS Edition Bundle Specifications

General

Brand	Cisco
Model	5520 - ASA IPS Edition Bundle
Category	Software
Language	English